Austrian data protection authority slammed by CJEU
noyb.eu
The authority wanted to allow a maximum of two complaints per month per complainant. The CJEU has rejected this limit

cross-posted from: https://beehaw.org/post/17950455

In the judgment C-416/23, the Austrian Data Protection Authority (DSB) received a slap in the face from the CJEU. The authority has – arbitrarily – set the number of complaints that data subjects can file at a maximum of two per month, even if one is affected by GDPR violations almost daily. The CJEU has now made it clear: as long as you do not file abusive complaints, all users have the right to have any GDPR violation remedied by the DSB. Unfortunately, Data Protection Authorities (DPAs) trying to get rid of complaints isn’t just an Austrian problem. Our figures show an EU-wide problem with DPA inactivity.